Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
File: _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json)
Hash identifier: JvbEOj0sLNAZ0hAcJlGskI6HbfFONUsyT3kpAu+lahc=
Subject key identifier: 40:6C:57:7A:CA:37:61:98:E0:41:EA:74:FA:01:AE:76:59:10:D4:C3
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Certificate issuer: /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial: 019CAB6B6146C39B4BCEFA063A2A934A11D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:01:06 +0000
Manifest this update: Sun 01 Mar 2026 22:01:06 +0000
Manifest next update: Mon 02 Mar 2026 22:01:06 +0000
Files and hashes: 1: W51aSCH5iLe_5vEXYpA2X4F2HE8.roa (hash: ZbZbQYSFnkBpfEvsfFoB6giW5sjyWzNWyKbHcpK0sVE=)
2: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: 9Uvr77xZl9RTvLvS+yzPcqu2VAlvZHkRZnD+XgrIwOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:61:46:c3:9b:4b:ce:fa:06:3a:2a:93:4a:11:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Validity
Not Before: Mar 1 22:01:06 2026 GMT
Not After : Mar 2 22:01:06 2026 GMT
Subject: CN=406c577aca376198e041ea74fa01ae765910d4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:bc:86:fb:2c:41:4c:b9:ee:20:79:97:4c:
8d:8d:66:52:0e:18:1d:f1:d0:46:05:68:0b:35:33:
41:ea:6b:5e:2d:1a:22:ba:24:b7:3b:b7:fa:2a:16:
0e:76:fa:df:0e:71:f5:d9:32:e3:6c:7a:ff:d1:86:
46:64:b4:50:b6:80:dc:bd:a3:f4:65:d5:6b:94:5b:
5e:f5:dd:59:de:42:8b:48:30:0f:f5:88:5c:00:6d:
42:3f:a0:de:bb:c7:2f:98:84:37:13:1b:ff:63:4f:
f1:1c:0f:5b:20:60:cc:67:f2:17:b2:3b:f4:00:39:
74:d8:56:14:61:92:34:c6:d6:2c:4d:11:1b:e3:4d:
19:21:53:a8:a9:17:4c:84:a5:59:43:e7:b0:31:11:
b9:44:9e:50:c1:37:12:65:5f:8c:9c:db:22:22:2d:
00:88:09:98:78:9c:c8:a3:fe:d8:de:7b:c3:8c:86:
ae:2b:8b:ec:1d:4d:a3:ad:68:06:c3:5e:3f:1f:cb:
1d:61:7f:3f:41:86:c5:bc:c6:12:9c:f9:28:57:78:
31:bf:a1:2c:bb:05:fc:2f:03:44:57:29:9f:dd:be:
bc:16:6c:ed:20:a7:6a:66:48:fa:91:e4:40:30:42:
70:f7:7e:1d:a3:72:2a:f8:6b:c3:7e:ee:1b:e7:e5:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6C:57:7A:CA:37:61:98:E0:41:EA:74:FA:01:AE:76:59:10:D4:C3
X509v3 Authority Key Identifier:
keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:97:79:70:71:ee:a9:0f:65:92:99:0a:81:88:ec:81:a2:6b:
c8:86:fd:7a:41:4f:06:66:af:49:a0:58:e0:e8:d1:c0:3c:46:
a3:b7:3d:11:4b:e8:c7:fa:cd:ed:56:f4:31:da:f3:e1:3f:56:
e1:e6:1f:11:da:b6:2e:2f:03:fd:5d:39:04:2c:9a:e5:bd:a5:
d0:85:fe:c8:6f:54:9d:8f:16:3b:48:3d:5b:59:92:3f:10:96:
c1:50:96:b5:1b:42:7c:02:67:c3:87:8b:62:13:8a:33:0b:f4:
d0:1d:25:c1:f2:16:35:1c:98:a5:b2:c7:cb:ba:48:d6:5b:1f:
0d:0c:23:36:04:15:37:35:a3:48:80:1d:b8:f4:0e:ce:5e:46:
da:8d:cd:72:4f:1d:f3:88:c7:e5:40:a8:5c:e1:d0:ae:e6:12:
d6:c2:f2:1b:a0:dc:8a:bf:16:f3:14:5d:d7:3f:bc:24:72:ce:
51:13:e2:15:cf:f1:50:54:be:32:84:6c:b5:3d:4a:eb:49:4d:
a1:2c:25:74:f7:31:2d:cd:2c:43:b6:d4:c5:63:93:ff:0f:0a:
61:c4:ea:db:ec:4d:81:07:2a:37:17:f9:6e:21:24:18:f2:2f:
d3:61:04:6b:d1:94:95:d9:10:a5:1c:02:32:9e:66:28:e6:0d:
a9:26:e2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:23 2026 by rpki-client